Collaborate Disseminate
are there any sites with hardening guides for docker for production and development? If you browse you find quite a lot of bits and peaces but is there something like a consolidated list somewhere to be found?
Continue reading Docker – Security best practices development + production [on hold]
As an Information Security amateur I did all in my might to protect my Ubuntu-Nginx-CMS (WordPress) environment from BFAs, MITMs, and database injections.
sudo add-apt-repository ppa:certbot/certbot -y && apt-get upd… Continue reading Basic defence for Debian-Nginx-CMS environments
What technical security measures do organizations like online banks, brokers and crypto-currency exchanges use to digitally protect their public facing web systems that customers log into. The information contained on those s… Continue reading What technical security measures are taken to secure customer-facing web systems? [on hold]
I have a service that’s spinning up fresh Ubuntu 16.04 instances onto a VPS (on behalf of users) and would really like to do what I can in terms of putting good privacy and security practices in by default.
This is pre any s… Continue reading How to secure a fresh Ubuntu 16.04 install [on hold]
I have a service that’s spinning up fresh Ubuntu 16.04 instances onto a VPS (on behalf of users) and would really like to do what I can in terms of putting good privacy and security practices in by default.
This is pre any s… Continue reading How to secure a fresh Ubuntu 16.04 install [on hold]
RancherOS is a container linux distribution that runs almost everything in a Docker container (even system services, not just user services like web apps or alike).
What are the recommended steps (if any) to harden RancherOS… Continue reading RancherOS hardening [on hold]
I’m using a tool on my website that detects any error and sends me an email when a code error happens. Recently, I’ve received some requests not allowed on my IP – not url – where only GET is allowed.
The requests all come f… Continue reading Is this some sort of hacker attack?
So just a random thought as were doing the Info Sec unit on my college course, how would you make a website DDoS proof without cloud-flare? Would it just be case of logging IP address, MAC address and CPU ID then having a scr… Continue reading making a site DDoS proof without the use of CloudFlare? [on hold]
Planning to setup Windows 2012 for remote users to login and work. What measures to keep in mind and how to secure it ?
I am working on Ubuntu Server with mysql installed, I have a forum application vbulletin 5 installed and there are hundreds of mail.ru and projectgold.ru created on my application, it looks like this:
each user also creatin… Continue reading hundreds of users creating mail.ru and projectgold.ru accounts on my application db